Stay Secure with the Latest Linux Advisories

security advisorydenial of servicecritical

Slackware 14.0 and 14.1 Critical: PHP Denial of Service Fix

New php packages are available for Slackware 14.0, 14.1, and -current to fix a security issue. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] php (SSA:2014-111-02) New php packages are available for Slackware 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/php-5.4.27-i486-1_slack14.1.txz: Upgraded. This update fixes a security issue in the in the awk script detector which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking. For more information, see: https://www.cve.org/CVERecord?id=CVE-2013-7345 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 14.0: Updated package for Slackware x86_64 14.0: Updated package for Slackware 14.1: Updated package for Slackware x86_64 14.1: Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 14.0 package: 4b2cf92d4630552eb1d5d2ffe43e3e85 php-5.4.27-i486-1_slack14.0.txz Slackware x86_64 14.0 package: 7f1c76279a73ece133fa0f0b3e3afaca php-5.4.27-x86_64-1_slack14.0.txz Slackware 14.1 package: c2f2a8a0077b94cbb725389de802ad20 php-5.4.27-i486-1_slack14.1.txz Slackware x86_64 14.1 package: 62ad0a4511e91f2d7ce94c5b9caffa7a php-5.4.27-x86_64-1_slack14.1.txz Slackware -current package: 647463455eec2306f36eafd1ea61dd31 n/php-5.4.27-i486-1.txz Slackware x86_64 -current package: 966c42fc092a8d4c2b7d6113ed8cbfcf n/php-5.4.27-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package asroot: # upgradepkg php-5.4.27-i486-1_slack14.1.txz Then, restart Apache httpd: # /etc/rc.d/rc.httpd stop # /etc/rc.d/rc.httpd start +-----+ . Recent PHP updates for Slackware address a severe vulnerability that could lead to denial of service in the 14.0 and 14.1 releases.. Slackware Packages, PHP Update, Security Fix, Denial of Service, Update Instructions. . Severity: Critical. LinuxSecurity.com Team

Apr 21, 2014 •Critical Slackware